ကီးကီး

၁။ Bot
Bot
။

။
Robot ႔ Bot ။

၂။ Bot Network
( ) Bot Server
Network Bot Network ။
Bot Network ႔ (*2) ၊
DDoS (*3) ႔
။
၃။
။

１) ။

2) ႔ ။
 (URL) ႔
႔ ။

4) (*4)
။

5) backdoor (*5)
။

႔ ။

6) (PtoP) ။
7) Instant messenger (*6) ။
႔ 4)
။

။ Microsoft Update ႔
Network
။

။
Network Server (Bot
IRC (Internet Relay Chat) (*7) ႔ ၊ DoS
(*3) network ၊ Network Scanning (*8)
႔ ။ ႔ Version up Server
။
႔ ႔

1) Spam mails ႔ (*2) ႔ )

2) DoS ႔ ( ႔
)

3) Network (
)
(
)
5) Version up Server ။

။( ႔ ႔ )
1. Bot
(Windows )
Bot
။ ၊ (Antivirus)
Bot (Virus Definition file)
၊ ႔ ႔ ။ ႔

။
။
Bot
။

１） ။
Microsoft ။
႔ Microsoft ႔ Bot ( ႔ )
3) ။
Microsoft Update ။
♦ Microsoft Update
http://www.update.microsoft.com/microsoftupdate/v6/default.aspx
♦ Microsoft Update
http://www.microsoft.com/en-us/windows/help/windows-update

Microsoft Update “ Tool”

။ Tool Bot
။ Microsoft
Update Microsoft
Download Tool ။ Tool
။

♦ Tool
http://www.microsoft.com/security/pc-security/malware-removal.aspx

2) ။
 ႔ ။
႔ Bot ( ႔
) 3) ။
Update
။ ႔ Scan ။
( : Scan ။
။)

႔ ။ Firewall
Network ။
႔ Bot
/ Bot
။ ႔
။

・HOSTSファイル
Windows NT,2000の場合は、
C:\WINNT\SYSTEM32\DRIVERS\ETCのフォルダにあるHOSTSファイル
Windows XP,Vistaの場合は、
C:\WINDOWS\SYSTEM32\DRIVERS\ETCのフォルダにあるHOSTSファイル

★ Notepad (notepad.exe) ။
 Network ။
URL ႔
IP Address ႔ ။

(Localhost)
။
Microsoft Website URL ( ႔) Website
႔ ။ (127.0.0.1 )
127.0.0.1 localhost
႔ ။
127.0.0.1 www.microsoft.com
127.0.0.1 www.nai.com
127.0.0.1 trendmicro.com
127.0.0.1 update.symantec.com
127.0.0.1 updates.symantec.com
႔ (#) ။
၆။ ။
Bot
။

(1) ။
၊ Spyware ( ႔
) ။ (Virus Definition File)
Update ။

(2) ။
။ ႔ ။

(3) ႔ ။
႔
။
႔ ။

(4) Browser Internet Options (Security Options)

 ႔ High ။
Internet Explorer 7 )

Internet Explorer ။
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-
us/zone_ovr.mspx?mfr=true

(5) ႔ ။
႔
။ (3) ႔ ။
(6) Router ( ႔) Firewall
။
Network Router ( ႔)
Firewall ။
( ႔) Network
႔ ။

(7) OS Application Update ။ (Microsoft Update ။)

Web Bot
Web ၊ Bot
။
(1) Bot Web ။
(2) OS Application ။
(3) ႔ Web
။

႔ ။
♦ IT Security White Paper 2007— 10 ။( )
http://www.ipa.go.jp/security/vuln/20070309_ISwhitepaper.html
♦ 2004
http://www.ipa.go.jp/security/vuln/20050331_trend2004.html
♦ Tool
 http://www.microsoft.com/japan/security/malwareremove/
♦ Cyber Clean Center (CCC) Ministry of Internal Affairs and Communications Ministry of
Economy, Trade and Industry ႔ ။
https://www.ccc.go.jp/

Scan ( )
♦ Cyber Clean Center Bot
https://www.ccc.go.jp/flow/
♦ Symantec
http://security.symantec.com/sscv6/home.asp
♦ Trendmicro Scan
http://www.trendflexsecurity.jp/housecall/
♦ McAfee Scan
http://www.mcafee.com/japan/mcafee/home/freescan.asp

(*1) Phishing
႔ ( ၊ Credit )
႔ ( ၊ ၊ ၊ Credic
) ။ Phishing Fishing
။

(*2) Spam mail

UBE ( ႔) unsolicited bulk Email ႔ ၊
။

(*3) DoS /DDoS

(DoS )
၊
။ ႔

။ ႔ DDoS (Distributed Denial of Service:

႔ ) ။
DoS ။
Website
။

(*4)
network ၊ Application ၊ protocols
။
၊ ။ Operating ၊ Application
။ ႔
။ Security hole
။

(*5) Backdoor
႔ ။
Port ။
႔ ။

(*6) IM（instant messenger）

Chat
။
႔ ။ AOL Instant Messaging MSN
Messenger ႔ ။

(*7) IRC (Internet Relay Chat)

။ IRC Server
႔ ။

(*8) Network Scanning

Port Scan Port ။
Backdoor ႔
။
 ႔ ။
♦ Ahnlabo
http://www.ahnlab.co.jp/
♦ Kaspersky Labs Japan
http://www.kaspersky.co.jp/
♦ Symantec
http://www.symantec.com/ja/jp/
♦ Sourcenext
http://www.sourcenext.com/
♦ Trendmicro
http://jp.trendmicro.com/
♦ Microsoft
http://www.microsoft.com/ja/jp/
♦ McAfee
http://www.mcafee.com/japan/
※ ႔ (IPA)
။ ႔
႔ ႔ ။ ႔
႔ ၊ ၊ ႔ ။
( : （NISC）〒
100-0014 2-4-12 poc@nisc.go.jp）